Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa
File: 8c01b867-e0ea-380c-95a8-417bf084bf0e.roa (raw, json)
Hash identifier: n2rrP6yjADkmVnBSQa/VSDwbWsJ/M1uPm6jgsNFmXPk=
Subject key identifier: AC:47:CC:17:3D:62:CC:F4:B3:8D:69:F8:BA:E5:3B:D5:0A:DB:0C:BC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF5748036924FCEB8920F60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 72.247.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:74:80:36:92:4f:ce:b8:92:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=498be069-9043-420a-8496-37f79f2ac230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:34:e3:e9:86:e1:66:77:05:8d:41:d0:c2:
07:c5:fe:6b:c5:f7:eb:24:20:e9:3a:0c:4a:7d:40:
71:06:d2:76:46:c8:71:2a:f3:09:55:74:c0:48:3d:
74:3e:3a:e4:aa:a2:b7:f1:d3:da:32:e9:b0:6a:c5:
32:e6:09:40:46:4d:c5:ba:08:c6:7e:47:38:eb:5d:
b1:c3:37:8c:de:e7:78:a9:84:65:3d:d3:0a:67:37:
da:46:92:ab:5f:48:26:b9:18:47:71:bc:47:02:e9:
d5:c0:6f:42:64:81:84:09:76:92:13:f6:72:f2:3e:
c4:5f:0d:2b:b5:8b:c0:e2:63:b6:da:d4:96:fe:d9:
e1:03:61:d2:42:8b:a3:3b:73:b2:63:1b:40:6a:c0:
8c:fd:26:a5:6e:1e:89:a4:7b:3c:40:33:ad:27:a6:
24:a1:00:3b:fe:b8:57:97:09:de:49:19:31:9d:a3:
46:69:44:f9:29:70:99:ba:fe:f3:7f:9b:31:70:77:
39:32:a8:6f:fc:f0:b6:3b:b2:a0:de:1f:53:7c:aa:
3e:45:2f:e3:e0:20:76:82:b2:82:87:2a:eb:58:9b:
49:9f:32:99:bb:59:3f:b9:90:7f:4e:d1:56:ca:27:
96:bd:25:72:14:95:64:dc:ff:d5:83:1d:e2:de:8e:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:47:CC:17:3D:62:CC:F4:B3:8D:69:F8:BA:E5:3B:D5:0A:DB:0C:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.247.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:c6:55:80:61:6e:a0:66:cc:41:85:31:3c:1f:86:49:9b:38:
73:12:99:ee:32:fe:a8:a2:33:2b:3b:b8:d5:b7:ce:63:13:59:
5d:61:53:20:27:17:0f:8d:13:4e:25:95:3a:b6:1a:18:8a:b9:
38:c3:29:b7:27:ea:7b:00:e8:88:c0:64:7e:04:d2:fd:e8:ca:
82:f1:e5:f3:23:4f:ab:f4:94:32:b7:3c:9b:7b:5e:cb:ce:58:
3b:ac:f1:bd:33:c4:45:0f:11:d2:a3:44:b8:4c:94:21:90:2e:
2f:83:4e:ec:a6:33:74:0a:2c:54:e1:e0:ef:ad:ea:a5:d5:bd:
fa:f2:ba:56:fe:a4:a3:e9:a7:dc:dd:2c:01:30:f4:79:5f:8d:
8f:9a:0f:90:42:72:bf:67:8d:f4:f6:71:49:d1:9f:d1:e2:01:
61:68:92:63:1a:80:e9:0c:c2:40:ba:0c:dd:7f:14:78:e8:a2:
64:91:d0:ad:6b:42:88:23:13:4b:dc:c8:1e:d4:a2:bd:4f:bb:
da:a9:04:26:f5:db:28:4e:ce:ac:fe:74:c2:ee:9d:28:42:b0:
e5:ef:78:a1:fb:26:e4:da:96:33:42:ac:77:d8:7a:24:c3:82:
92:08:64:ce:b4:54:6a:9e:f5:b3:e0:a0:85:0a:2f:5b:74:fd:
10:08:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:41 2025 by rpki-client